Exposing The Syrian Electronic Army - An OSINT Analysis 
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SYRIAN GLECTRONMIC ARMY 


We've decided to take a deeper look inside the Internet-connected infrastructure of the Syrian 
Electronic Army using public sources with the idea to assist U.S Law Enforcement and the 
security industry on its way to monitor and track down and act upon current and upcoming 
malicious and fraudulent campaigns courtesy of this cyber threat actor. 
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Sample list of personally identifiable email address accounts known to belong to the 


Syrian Electronic Army: 


th3pr0123-ap2@gmail.com 
th3pr0123@gmail.com 
whitehouse-online@hotmail.com 
whitehouse_online@hotmail.com 
sea.the.shadow@gmail.com 
leakssyrianesorg@gmail.com 
leaks.syrianes.org@gmail.com 
syrian.es.sy@gmail.com 
syrianessy@gmail.com 
sea.wr4th@gmail.com 
prO@hotmail.nl 
sy@hotmail.com 
sy34@msn.com 
killboy-1994@hotmail.com 
jlO@hotmail.com 
cf3@hotmail.com 
zq9@msn.com 
doom.ceasar@gmail.com 
y8p@hotmail.com 
rq1@hotmail.com 
wassemkortab@yahoo.com 


sf0725zq0330@dressmall.com 
adam.magdissi@hotmail.com 
bf6@hotmail.es 
b-6f@hotmail.com 
bg_@hotmail.com 
asdelylord@hotmail.com 
i-Bu@hotmail.com 
b-8q@hotmail.com 
tiger.tiger248@gmail.com 
nagham_saifo@hotmail.com 
victor@thepro.sy 
edwinjouhansyah@gmail.com 
sea.coders@hotmail.com 
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atbhost.net 
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Sample known domains belonging to the Syrian Electronic Army known to have been 
involved in the campaign include: 


recovertosandy.info 
Iboro.info 
mittromneysamerica.org 
borneonashhash2013.org 
flushmob.net 
seven7media.com 
mallorytrophy2012.com 
bustimetable.net 
devoteam.biz 
airport-van-rentals. biz 
lifeinfinity.org 
governancevillage.org 
dentoncommunityband.org 
martinstephenson.org 
commissiondelacapitalenationale.info 
enfermera-virtual.info 
real-patent-reform.org 
theatreconfetti.org 
webpsych.org 
shoujuan.org 
nagarhope.org 
mudbytes.org 
issuesink.org 
consularassistant.org 
canadiangoldreserves.org 
amplifiedperspectives.com 
laundryquw.com 
wandash.net 
openeffect.org 
openqry.org 
wordsnsynceditorial.org 
jshcm.org 
cameltoehoney.com 
minenohara.info 
bamboogolftee.org 
executiveinnandsuites.org 
slcbackflow.com 
tax-miles.com 
unicaindia.com 
grenadine-airways.com 
snipefleet330.org 


standforwelcome.org 
poolball.org 
burnin4business.org 
inlink.org 
microsave-africa.org 
sewobe.org 

rockmeusa.org 
gazeterumeli.com 
fh1000.com 
kwattsjuiceplus.com 
turkiranticareti.com 
cameltoehoneys.com 
blackwateranglers.com 
gpcrmeeting.com 
genericlasixnoprescription.com 
pisheprom.com 
shepherdshavenministries.com 
runagainstsuicide.com 
nometoqueslosdonettes.com 
premieruc-om.com 
xdsjhm.com 
momkeepingitreal.com 
blerdology.com 
infoideea.info 
asa3online.com 
tbarnettjuiceplus.com 
greenenergytrainingservices.com 
Villiglas. biz 

bccla-pg.org 

smarterflow.org 
hamiltonpas.org 
adurotheband.com 

ktsct.com 

bs358.com 
kitchencontraption.com 
jobsinmyareas.com 
prod-consult.com 
nerioinformationservices.com 
staciewolcottjuiceplus.com 
kindertrauma.net 
hybridlifehope.com 
glassrepairzanesville.com 
o-verlay.com 

oakaloosa.info 


learnbycrystal.info 
harbinese.info 
cgs-ltd.net 
daycreek.net 
arbitrationacademy-students.org 
florence-hotel.org 
oraiz.org 
foster-lloyd.com 
coda-post.com 
pi2013.com 
hope4anewnation.net 
stord.info 

ivfesa.info 
sea-shadow.net 
indianasewing. info 
shadows-ops.com 
nickgrovephotography.info 
onlydomains.info 
stemacademy.info 
phoenixrollerderby.info 
zonebleue.info 
netzwerkgehirne.info 
eventleap-test.info 
superiorplayofsc.info 
qxct.info 
tontonmarcel.info 
coolworks. info 
timuinc.com 
tradhus.info 
jouybari.info 
tacklemaking.info 
northwestleadersforum. info 
gregmoser55.info 
ipad-how-to.info 
psoriasisfree4life.info 
mobinia.info 
medscope-ar.com 
eigo-kennsyuu. info 
futurim.com 
bydefaultsoftware. info 
alhabeebco.com 
hispanicachievers.info 
codepassion.net 
ouvrirlemetrolanuitpourlessdf.info 


1percity.info 
valuechiropractic.info 
plateauecosports.info 
dohaclimategateway.info 
chambel.info 
financerecruitment.info 
indiscapes.info 
yrityshyva.info 
spdas.info 

shopgun.info 
netnuts.info 
nokillnyc.info 
liquidchrome. info 
tedcookson. info 
edps.info 
cityandguilds.info 
landwer.info 
almajd-paper.com 
centrecatalalausana.info 
adigalegacy.com 
29cars.info 
library-ar.com 
18cars.info 
adatiaverlag.info 
2211tuscany.info 
lidifaria.info 
buyourcity.com 
eduintec.com 
com2012deviab.com 
ornconference2012.org 
buycom.info 
studentskivodic.info 
il9festa.info 
pampaneira.info 
abreathoffreshthinking.net 
syrian-es.net 
doyoudefinebusiness.net 
teen-zone.org 

usi-uk.org 

alefbe.org 
planetarium-mn.org 
video-web.net 
ceinntec.org 
fotoepilazioneoderme. info 


quebecfishing.info 
ringiovanimentooderme. info 
shopcard.info 
fluids-novel.info 
vodiczastudente.info 
beinteam.info 
iranlandmedical.info 
malpracticesouthphiladlephai.info 
journalists-u.org.sy 
m-sharoqco.com 
mowr.gov.sy 
irrigation.gov.sy 
sanyoelevators.ca 
chswpirc.org 
edwinjohansyah.com 
rxesventa.com 
atbhost.net 

jcef.biz 

zusas.org 
sports-centre.org 
cgshartford.org 
napravilogo.com 
r3eletronicos.com 
yemennews. biz 
eularo.org 
bcaconline.org 
egyklikk.org 
wanderlust-blog.org 
gikitchen.org 
trailernet.org 
streetwisepartner.org 
readingframe.org 
originallyblessed.org 
labelsformenandwomen.com 
tapintoto.com 
kellyecjuiceplus.com 
gosacredheartu.com 
theisfoundation.com 
sundance-news.com 
ago-go.com 
stylersong.com 
suduya.com 
amradiosupply.com 
windowworldestimates.com 


kelseyheartsjuiceplus.com 
cppnavstore.com 
since2006forever.com 
rdi-lb.com 
maroonmarket.com 
aboutgroovy.org 
coresta.net 

newtrax.net 

fguimp.net 
catechnolgiesinc. biz 
caslab.biz 
thefirstteesubphila.org 
victorbrito.org 
sea-smtp.net 
bluesam.net 
veggiesnfruitsjuiceplus.com 
supervaluap.com 
republicofmexico.net 
sustainabilitypossible.net 
open-garden.net 
amradiosupply.net 


Sample known responding IPs known to have been involved in the campaign include: 


23.195.69.108 
45.155.36.16 
104.239.213.7 
192.64.147.141 
50.63.202.48 
45.155.38.17 
198.105.244.111 
99.83.154.118 
49.212.180.149 
172.67.148.1 
74.222.19.110 
74.222.19.108 
203.189.109.212 
23.227 .38.69 
23.227 38.32 
210.157.1.134 
173.252.255.10 
34.254.1.203 
104.27.128.17 
185.53.178.6 


50.115.138.52 
173.252.192.113 
104.27.129.17 
185.53.178.10 
208.91.197.113 
54.72.9.51 
67.215.66.146 
108.162.194.72 
50.63.202.35 
185.53.179.9 
104.28.6.67 
67.227 .230.24 
213.239.197.101 
184.168.221.50 
199.127.60.11 
198.252.101.244 
141.8.226.22 
50.63.202.90 
198.185.159.145 
3.33.152.147 
128.136.35.26 
108.167.142.23 
212.11.196.188 
198.57.247.194 
69.195.124.68 
69.172.201.217 
209.99.64.51 
23.249.1.243 
50.63.202.83 
209.99.40.225 
209.95.51.222 
192.64.147.203 
199.250.194.209 
184.107.194.242 
104.28.23.28 
91.144.8.148 
104.21.2.222 
66.165.237.74 
104.217.157.210 
52.69.166.231 
185.53.179.29 
104.216.89.146 
67.225.218.50 
198.105.244.114 


184.154.171.237 
203.170.80.250 
185.28.193.193 
198.105.254.111 
120.136.10.20 
77.78.104.221 
52.6.29.117 
34.200.200.95 
213.247.47.190 
184.168.221.70 
159.253.222.4 
50.63.202.89 
54.231.168.203 
52.218.160.55 
52.218.128.139 
202.172.28.176 
172.64.92.126 
209.99.40.219 
199.83.131.187 
184.168.221.68 
52.0.217.44 
52.4.209.250 
72.52.4.119 
98.124.243.49 
64.74.223.49 
8.5.1.32 
198.54.117.199 
184.168.221.69 
50.63.202.33 
192.254.235.45 
172.67.172.219 
119.81.165.17 
107.180.0.213 
173.201.192.5 
67.227.167.165 
34.102.136.180 
173.201.192.20 
69.64.147.28 
72.167.218.45 
185.53.177.12 
184.168.221.34 
52.78.124.149 
50.117.113.219 
101.32.31.22 


184.105.178.92 
209.99.40.223 
154.196.191.206 
50.63.202.93 
50.63.202.85 
5.133.198.13 
50.63.202.67 
184.168.221.83 
208.991.197.218 
93.127.230.177 
50.63.202.39 
50.63.202.70 
104.223.117.64 
93.127.230.176 
154.36.223.228 
69.72.147.125 
50.63.202.64 
199.34.228.75 
199.34.228.154 
127.0.0.2 
209.99.40.220 
184.168.221.49 
50.3.230.111 
198.252.107.79 
166.62.27.146 
59.188.232.88 
157.112.176.14 
45.194.239.151 
156.237.208.153 
208.73.211.246 
150.95.52.116 
198.252.98.71 
150.95.52.68 
199.59.242.151 
89.163.245.187 
89.163.246.12 
208.73.211.179 
208.73.211.249 
141.8.225.80 
141.8.225.31 
203.189.105.213 
184.168.221.71 
69.64.147.242 
119.59.97.76 


107.170.207.167 
209.141.44.99 
198.252.100.60 
78.41.204.27 
209.126.123.12 
198.252.100.14 
184.168.221.58 
3.21.90.33 
15.197.142.173 
199.115.115.102 
78.41.204.28 
209.126.123.111 
47.242.215.189 
23.202.231.168 
3.18.65.24 
3.20.147.159 
184.168.221.28 
3.14.241.133 
204.236.239.5 
199.59.243.120 
75.127.114.162 
184.168.221.36 
172.82.173.111 
182.61.201.50 
198.56.232.5 
31.14.139.226 
185.53.177.6 
185.53.177.20 
141.8.226.19 
50.63.202.95 
209.99.64.25 
109.234.109.76 
50.17.195.149 
104.28.4.62 
107.20.253.26 
49.156.55.84 
23.217.138.108 
166.78.103.6 
157.7.107.172 
74.82.63.123 
198.54.117.198 
50.87.144.84 
72.52.4.91 
54.65.172.3 


211.132.126.50 
89.163.246.86 
52.213.114.86 
172.67.158.215 
5.157.86.5 
158.85.170.230 
23.195.69.112 
143.95.128.112 
60.56.230.138 
36.37.242.94 
218.251.125.178 
157.7.156.160 
72.52.178.23 
59.106.165.129 
69.16.230.43 
192.195.77.16 
103.253.72.212 
66.175.233.136 
205.164.41.119 
72.52.4.90 
38.55.57.39 
72.52.179.174 
91.195.240.126 
52.7.102.57 
37.58.107.93 
159.8.210.35 
59.188.220.23 
47.91.170.222 
52.72.4.142 
114.55.114.157 
86.105.245.69 
104.24.103.202 
52.5.211.90 
74.208.236.49 
3.19.116.195 
54.165.156.210 
54.209.179.105 
54.209.187.240 
104.24.102.202 
198.54.117.200 
77.81.245.102 
103.4.218.160 
198.105.254.74 
198.105.244.74 


50.56.81.119 
107.191.47.112 
50.63.202.86 
47.91.205.84 
103.30.16.249 
50.7.228.78 
47.91.205.106 
202.129.207.84 
52.71.57.184 
54.144.21.246 
3.130.204.160 
192.254.236.94 
198.57.247.245 
50.23.135.20 
209.99.40.221 
3.130.182.237 
209.99.40.222 
182.48.49.100 
78.135.94.43 
31.210.61.222 
188.132.220.238 
202.254.234.103 
136.243.73.142 
104.243.42.202 
45.32.196.109 
184.168.221.55 
157.7.107.24 
195.186.210.241 
62.76.43.53 
185.28.23.29 
203.189.109.84 
66.85.145.20 
120.136.10.31 
119.81.19.207 
31.210.94.234 
50.63.202.32 
144.76.126.210 
85.158.203.190 
198.252.108.65 
185.55.224.104 
184.168.47.225 
184.168.221.66 
34.200.65.177 
184.168.221.86 


198.57.247.143 
52.17.121.40 
154.214.218.175 
52.21.158.216 
952.214.195.225 
192.230.66.93 
172.99.89.235 
204.44.66.20 
217.29.62.10 
23.239.97.218 
184.168.221.56 
104.160.171.89 
104.160.171.92 
154.95.147.21 
69.163.35.241 
184.168.221.40 
185.68.16.81 
52.210.253.64 
54.154.177.226 
59.106.19.55 
198.101.242.72 
50.63.202.52 
198.54.117.211 
198.54.117.210 
192.64.119.60 
104.24.116.97 
139.162.29.44 
198.252.104.183 
104.21.71.105 
45.199.39.103 
108.179.232.162 
172.67.144.101 
50.63.202.61 
212.83.181.188 
198.20.112.19 
120.136.14.12 
184.168.221.78 
172.217.17.115 
172.217.1.243 
74.125.140.214 
184.168.221.6 
184.168.221.75 
50.63.202.4 
50.63.202.2 


216.58.194.211 
172.217.4.83 
108.167.189.55 
112.78.117.118 
156.242.175.231 
192.185.4.59 
50.87.181.34 
23.253.164.103 
210.128.234.162 
49.212.91.77 
49.212.86.99 
184.168.221.37 
113.10.201.146 
184.168.221.14 
173.236.174.132 
157.7.188.41 
107.190.142.218 
219.94.128.187 
184.168.221.84 
202.172.28.14 
198.105.244.228 
91.195.240.117 
198.105.254.228 
184.168.221.87 
162.255.119.75 
145.131.24.122 
36.86.63.182 
64.20.53.28 
153.120.4.162 
50.63.202.38 
213.174.157.151 
52.25.92.0 
185.230.63.186 
185.230.63.107 
185.230.63.171 
199.15.163.138 
154.209.141.50 
157.112.152.15 
145.14.135.162 
145.14.135.215 
54.212.70.253 
46.166.189.98 
159.89.99.10 
155.138.210.16 


112.78.117.115 
198.252.107.39 
106.186.69.15 
192.0.78.24 
145.14.135.100 
145.14.135.51 
188.0.231.4 
209.99.40.224 
52.7.6.73 
3.130.159.8 
54.161.222.85 
18.189.45.21 
64.98.145.30 
165.227.2.170 
50.63.202.72 
211.125.82.70 
157.112.189.49 
163.44.65.130 
202.172.28.184 
184.168.221.76 
202.214.194.90 
202.222.31.77 
50.63.202.92 
23.60.91.225 
202.172.28.174 
194.58.56.157 
104.18.36.79 
91.195.241.121 
194.58.56.61 
91.236.136.189 
23.200.237.225 
91.184.0.100 
88.150.252.64 
185.107.56.207 
18.213.250.117 
185.107.56.208 
109.73.76.2 
194.58.56.108 
194.58.56.67 
49.212.2.97 
184.168.221.93 
69.167.152.7 
183.90.228.26 
162.222.213.196 


69.64.147.39 
216.172.184.172 
69.43.161.179 
87.236.16.65 
192.111.151.198 
177.244.218.234 
98.124.204.16 
34.98.99.30 
184.168.221.82 
103.224.182.250 
107.148.169.112 
104.221.206.22 
52.205.67.62 
185.53.178.8 
69.30.234.142 
38.59.21.28 
172.245.13.98 
23.202.231.167 
198.15.64.90 
18.215.128.143 
219.94.129.226 
185.181.104.82 
218.93.250.18 
92.242.144.50 
91.195.241.137 
208.43.81.114 
50.63.202.73 
133.242.139.225 


We'll continue monitoring the campaign and will post updates as soon as new developments 
take place. 


